From FortiBleed credential harvesting and ASOS customer notifications to UIC ransomware, Citrix NetScaler KEV deadlines, Southern Company portal access and Advantest’s delayed PII notices — what is confirmed, what is alleged, and the patterns linking initial access to disclosure timing.